Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/EeuHOP1ld_YxpuE_gQSJqZEtgX4.roa
File: EeuHOP1ld_YxpuE_gQSJqZEtgX4.roa (raw, json)
Hash identifier: XyhhD+tamYBfloB02aI97R1OMdqo6L/U/hCCCp5CY44=
Subject key identifier: 11:EB:87:38:FD:65:77:F6:31:A6:E1:3F:81:04:89:A9:91:2D:81:7E
Certificate issuer: /CN=92a38f5ad6729bef4d49eae51c014698221ec146
Certificate serial: 019F23690E06EB25180CC61D4E76826280E9
Authority key identifier: 92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/EeuHOP1ld_YxpuE_gQSJqZEtgX4.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47719
IP address blocks: 185.61.48.0/24 maxlen: 24
185.61.49.0/24 maxlen: 24
185.61.50.0/24 maxlen: 24
185.61.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0e:06:eb:25:18:0c:c6:1d:4e:76:82:62:80:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a38f5ad6729bef4d49eae51c014698221ec146
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11eb8738fd6577f631a6e13f810489a9912d817e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:27:88:51:97:2b:ca:cd:e7:44:36:53:1b:
01:d5:51:c2:d7:7f:a7:36:cd:d3:af:e4:10:cf:be:
18:0a:7f:16:18:20:4b:e1:51:6d:ab:08:75:00:3d:
0b:4c:86:b5:32:c7:30:79:eb:0b:c4:31:1d:3d:ad:
1a:db:fb:fd:1e:1c:c0:f9:c9:eb:cb:8f:9f:bc:6b:
40:b6:b2:bc:44:ac:70:55:6a:f1:3e:d7:d4:95:27:
d5:a0:71:b3:d6:e1:a2:cd:7f:8a:d7:2d:a2:e4:fc:
85:9b:4d:cd:cc:66:a4:04:e4:78:33:73:26:93:7c:
c3:71:cd:f0:c7:43:fd:5a:6e:3d:08:ac:59:1f:b8:
22:55:14:7c:2b:fd:f8:c3:47:66:c5:3f:c1:9f:63:
0e:9e:3d:8d:a4:53:06:78:96:a1:3c:cd:2c:dd:b1:
bd:79:d1:01:08:cd:ac:c9:a6:88:20:a0:b9:c8:7a:
3d:6e:53:b7:5b:7d:26:8c:8f:31:5c:ff:15:ac:41:
57:39:f9:81:cf:d5:96:46:87:85:09:8b:b9:e8:ef:
e1:84:50:31:79:ce:af:1d:bf:d1:48:6b:51:88:c4:
c2:0e:57:ca:fa:d0:b6:89:0d:1a:98:f6:f2:ba:6f:
e3:01:06:aa:dc:5f:72:ae:3d:f8:7d:5d:59:ef:a6:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EB:87:38:FD:65:77:F6:31:A6:E1:3F:81:04:89:A9:91:2D:81:7E
X509v3 Authority Key Identifier:
keyid:92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/EeuHOP1ld_YxpuE_gQSJqZEtgX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.48.0/22
Signature Algorithm: sha256WithRSAEncryption
13:84:8e:2a:60:30:92:a2:f3:4d:f9:1a:21:fd:cf:ea:f1:8e:
21:f4:d6:51:cd:05:0e:50:3b:4d:82:6b:56:f1:46:3e:22:d8:
c8:28:ca:3b:13:5b:66:1d:9a:d7:65:64:e9:51:a0:9a:90:7e:
42:b3:4f:9f:26:08:4b:35:e1:df:71:0f:df:36:37:d9:30:12:
dd:1b:26:4d:f9:03:21:e4:54:54:75:40:28:70:9b:d8:e6:1b:
b8:4b:ea:1b:d3:2d:f5:1a:91:51:2f:9d:2f:d0:47:08:57:f6:
45:6f:71:de:84:3c:d0:b1:94:9e:1d:df:63:81:34:4c:1f:d8:
cc:e1:67:b7:25:61:66:dd:0c:dd:e9:03:06:a3:5d:b9:25:f1:
eb:40:8d:7c:4d:06:47:13:52:a3:ff:87:e0:4a:98:05:70:6b:
21:d8:c3:7f:29:9b:98:20:43:d2:3a:1b:77:4d:d7:69:01:2d:
61:33:52:21:c7:cb:0c:e2:23:87:85:9b:0d:a4:0c:76:2c:b0:
c3:9a:2f:ab:67:3b:99:8c:21:23:8d:4f:6e:86:f9:89:a4:00:
81:26:dc:bd:95:4f:49:be:90:a7:f8:9a:cd:68:63:fd:97:f9:
28:fa:0e:5f:56:98:cd:c5:69:0c:6e:f4:4f:d5:b0:17:05:9e:
69:99:8a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:28 2026 by rpki-client